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System for the safe authentication and management of registered credit instruments or documents comprising: a personalized document 
(10) provided with a microprocessor to store an identification code CEP of the holder and information on biometric characteristics of the 
same; means for releasing said document (10) to the holder, means for issuing registered credit instruments (12) or documents; means for 
validating the credit instruments (12), all of said means being provided with a device for acquiring at least one biometric characteristic 
of the holder; said credit instruments (12) comprising at least a security code univocally generated by utilizing the personal identification 
code CIP as a cryptographic key; said information being associated to a mathematical expression of the data of the fingerprint of at least a 
finger of the holder of said document (10); the recognition for the issue of the credit instrument (12) and the validation being obtained by 
comparing the information got by direct reading of the finger of the holder and the application of the mathematical expression with the one 
stored in the document (10). 
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SYSTEM FOR THE SAFE AUTHENTICATION AND MANAGEMENT OF REGISTERED 
CREDIT INSTRUMENTS AND DOCUMENTS 

This invention relates to a system for the safe authentication 
and rnanapement of registered credit instruments and documents. 
More particularly, this invention relates to a system suitable 
to identify with the utmost certainty the possessory title of a 
document, which is univocally associated to the legitimate holder 
on the basis of a personalized card. 

Besides, this invention relates to the apparatuses for issuing 
the personalized card and the document and for the validation of 
the latter, with the ascertainment of its authenticity on its 
utilization. 

Concerina registered documents, special reference is made to a 
specific credit instrument utilizable for commercial transac- 
tions which are executed with the utmost security, as the possi- 
bility of an illicit use of said instrument by third parties - 
due to loss or stealing -- is excluded. 

Anyhow, the same system of authentication and management may be 
utilized for any other credit instruments, such as cheques, 
share certificates, certificates of indebtedness, savings books 
and the like, as well as personal documents or personal identi- 
fication documents, of the kind, for instance, of credit cards, 
passports, identity cards and driving licences. 

Several methods are known for the execution of the commercial 
transactions that involve the transfer of money between persons. 
Many transactions take place without any material transfer of 
currency, for instance through a bank which sees directly, upon 
request by the concerned person, to crediting the indicated 
person with a given sum. 

In other cases, the payment is through credit instruments, for 
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instance bank cheques or bank drafts, relatively to which spe- 
cial cautions are adopted, to try to avoid their forgery or 
stealing and their illicit utilization. 

Another form of payment is based on the use of credit cards, 
which authorize the holder to purchase goods or services with 
third parties having an arranoement with the issuer of said 
cards, to which the charge of the payment is transferred. 
But also this form of payment is not free from risks, as the 
credit card may get lost or be stealed and unlawfully utilized, 
even though temporarily, by non authorized third parties. 
The aforementioned payment forms, widely adooted, allow to limit 
the supply of cash, which however is still the more practical 
and direct and sometimes compulsory system to execute commercial 
transactions whose amount is not always small. Obviously the 
possession of cash gives rise to fairly serious security pro- 
blems; in fact, stealed or lost c u r r e nc v c an be easily us e d by 
anyone, generally without problems, as not even the guarantees 
e x i s t t ha t safao u a r d some ho w or- other t h r- r. i r c u lation of cheques 
a nd credit cards. 

With an earlier. oatent application, the same applicant has 
intended to protect a system for commercial transactions suita- 
ble to obviate the aforementioned drawbacks, providing for the 
use of a personalized card integrating a microprocessor wherein 
a personal cod? and information are stored deriving from the 
application of a mathematical expression to the parameters 
referred to the fingerprint of at least a finger of the holder 
of the same card; based on such document, a credit instrument is 
issued, which can be associated only to the holder, and which 
may be, by way of example, a cheque for a given sum, validable 
with businesses that have stipulated an agreement with the 
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issuer, on the conclusion of the commercial transaction. Thanks 
to the provision of the personal code and especially the tran- 
scoding of the fingerprint integrated in the card, said credit 
instrument provides guarantees of utmost security, as it cannot 
be utilized by a person other than the holder, and also the 
person who receives the payment has the utmost guarantees, as 
there is the certainty of the authenticity of the the instru- 
ment, substantially assimilable to cash. 

It ha- been stressed that this system is susceptible of modifi- 
cations which can furtherly improve its already high level of 
alobal security, allowing at the same time to create simple 
apparatuses for the validation of th-3 credit instrument or 
securities whose circulation is limited, by way of example, 
within the frame of this invention, to banks. 

Obiect of this invention is therefore to provide a system for 
the authentication and management of registered credit instru- 
ments and documents., such as to provide the utmost security 
guarantees, causing them to be utilizable only by the holder to 
whom th?v have been . 1 eqi t ima tely issued. 

A further obiect of this invention is to provide said credit 
instruments associated to the economic transaction or said 
repist.=M- c? d documents or identity documents with a security print 
indisroi ubly associated to the paper support forming said inst- 
rument or document. 

A further object of this invention is to realize simple appara- 
tuses for carrying out the different stages of the system which 
allows to implement the above defined system. 

These and still further objects are reached by the system for 
the safe authet ication and management of registered credit 
instruments and documents subject matter of this invention, 
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comprising : 

- a personalized document incorporating a microprocessor suita- 
ble to store a personal identification code of the holder and a 
numeric information associated to biometric characteristics of 
the same holder; 

- first, means for releasing said personalized document to the 
holder ; 

- second means for issuing registered credit instruments or 
documents; and 

- third means to validate the use of the instruments or docu- 
ments, all of said means being associated to an information 
system and r.»rovi dad with device allowing to acqui re at least a 
biometric characteristic of the holder; 

said issued instruments and documents comprising at least a 
security code uni vocally generated by utilizing the personal 
identification code as a cryptographic key; 

said information being associated to a mathematical expression 
of th? data concerning the fingerprint of at least one live 
finger of the holder of said personalized instrument or docu- 
ment: 

the rncoonition of the holder', both for the issue of the instru- 
ment or document and for the related validation, being obtained 
bv comparing the information got through the direct reading of 
the live finger of the holder and the application of the mathe- 
matical expression with the information stored in the personali- 
zed documents. 

The characteristics of the system for the safe authentication 
and management of registered credit instruments and documents 
subject matter of this invention will be better understood from 
the following description, wherein reference is made to the 
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attached drawings which show schematically a preferred non 
limitative embodiment of the same system, rBferrsd by way of 
examole to a credit instrument, and wherein: 

Fiq. 1 shows the block diagram of the issue stage of the perso- 
nalized card; 

Fiq. ? shows the block diagram of the issue stage of the credit 
instrument, based on said personalized card; 

Flo. 3 shows the block diagram of the validation stage of the 
credit instrument associated to the personalized card. 
With reference to the aforementioned figures, the system for the 
safe authentication and management of registered credit instru- 
ments and documents subject matter of this invention comprises 
basically a personalized document 10 and a. paper support forming 
the credit instrument 12. The personalized document or smart- 
card 10, formed, by way of example, by a card having dimensions 
similar to those of the conventional credit cards, incorporates 
a njicroorocessor wherein there are stored a personal identifica- 
tion c r< * j r. i p and a ma t hema t i ca 1 expression as sec i a ted to at 
least one fingerprint of the person who requires of the issuing 
insti irur.ion. for instance a ban!:., said card 10, to utilize the 
system subject matter of this invention referred to a credit 
instrument to perform commercial transactions. The personal 
identification code CIP, for instance in the form of an alphanu- 
merical sequence univocally associated to each holder, is gene- 
rated by the information system of the issuer SI and sent to the 
apoaratus for the personalization of card 10, of which more will 
be said in the following. The mathematical exoression stored in 
the microprocessor of card 10 is advantageously formed by an 
algorithm of the DES type (Data Encryption Standard), which 
allows to transcode the parameters associated to the fingerprint 
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of one or more fingers of the applicant, forming therefore a 
unique feature of the same. 

In the microprocessor of card 10 there are also stored, accor- 
ds, no to a preferred non critical embodiment, particulars and tax 
number of the applicant, as well as the current account number, 
complete with the bank co-ordinates, for the domiciliation of 
the credit instruments to be issued and negotiated. 
The credit instrument 12, which is the mwns for the execution 
of the economic transaction through the system subject matter of 
this invention, is formed by a support, preferably from paper, 
whose scheme is shown in Pips. 2 and 3. *-h.-;oed. by way of exam- 
ple, like bank cheques or drafts; anyhow, said support may also 
t>t?. of diffent size, as the system of this invention concerns in 
general all of the credit instruments, --;s for instance savings 
books, share and deposit certificates, besides the mentioned 
personal documents or personal identification documents . Accor- 
ding to a preferred embodiment, said support has the configura- 
tion of a conventional cheque, for i nr. r once from watermarked 
paoer, which is authenticated on the basis of the data previou- 
sly stored in the microprocessor of card 10, In particular, 
throuah an apparatus of which more will be said in the follo- 
wing, a dot coding (not i nterpre tab] e at sight) is provided, 
alona a prefixed field, on the paper support forming the credit 
instrument 12, which coding defines, for instance, the issuing 
date, the code of the issuing institution and the amount of said 
instrument. The same data are also formed along a distinct- 
field, expressed in cryptographic form through a key made up by 
the aforementioned personal identification code stored in card 
10. 

According to a further characteristic of the invention, the 
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support forming the credit instrument or security 12 is provided 
with a security print 14, of any shape and size, made up by two 
or more zones with different light reflection: said zones are 
formed bv an alternation of embossed and hollow sectors, circum- 
scribed by approached lines differently oriented by groups 
relatively to one another. Impression 14 as a whole is obtained 
in reflecting or metallic ink, through offset and dry copper- 
olate orinting processes. The characteristics of the mentioned 
security print with which the support forming the credit inst- 
rument 12 is advantageously provided are not described in de- 
tail, being the subject matter of an autonomous patent applica- 
tion registered in Italy by the same applicant. 

For the; implementation of the system of this invention, by way 
of examnle and not critically referred to credit instrument to 
cany n;»t commercial transactions. specific apparatuses are 
sudoI iel soma of which have already bean mentioned: there are, 
i n o?. r r, i n u \ a r , a f i r s t a p pa r a t l ■ 3 alio w ino to issue the persona -■ 
lized document, in the following referred to as card, and a 
second aoparatus which, against the recognition of the applicant 
throuoh the parameters stored in the microprocessor of said 
card, allows to issue the credit instrument and to authenticate 
it uni vocally. A third apparatus, described in detail later on, 
validates the instrument on its utilization, by means of a 
trianci ijlation . 

The first apparatus, shown as a scheme in Fig. 1, allows to 
realize the starting stage of the system of this invention, 
issuing the document or personalized card 10. Said apparatus 
comprises a personal computer 16, connected to the information 
system SI of the issuing institution, for instance a bank, 
throuoh a communication line 13; the information system 51 
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checks, through the connection with the anagraphical file and 
current accounts file of the institution or body issuing card 
10, the existence of the corresponding data (particulars and 
proprietary title of the applicant) relative to the person 
r e ci u i r i n q said card. The apparatus comprises also a 
reader /encoder 20 of card 10 to be personalized, an a biometric 
identi ty sensor 22. The reader/encoder 20 , connected to the 
personal computer 16 and consequently to the information system 
SI thrc.!oh line 18. receives from the latter the personal iden- 
tification code CIP; the biometric sensor 22, connected to or 
integrated in the reader -encoder 20, senses and transcodas the 
print or fingerprints of the applicant, who puts the finger or 
finger*?: in sequence on a special seat 24 obtained on the same 
sensor 22. The latter is obviously provided with one or more 
ope nines (not shown) for the introduction and coming out of card 
10 to be personalized. 

T he a pna r a t us schema t i c a 1 1 y s how n in Fig. 2 , which real 5. es t he 
secon--! stage of the system subject matter of this invention 
issin'r..:! the credit, instrument 12 based on the data of card 10, 
is substantially formed by the same components as the preceding 
apparatus, with the addition of a printer. In detail, said 
appara.tt.js comprises a personal computer 26 connected to the 
information system SI of the issuing institution through a 
communication line 28 and a software programme SW3, a reader 30 
of thF: personalized smart-card 10, an identity reader or biome- 
tric sensor 32 having a seat 34 where the applicant puts the 
finger- or fingers, and a printer 36, preferably an ink jet 
printer with graphic printing modalities. Said printer prints in 
cryptograohied form, on the paper support forming the credit 
instrument 12 which is inserted in it, a security code formed on 
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the basis of the data existing on card 10, authenticating said 

instrument. Printer 36 is provided with a conventional 
ooeninq(s) (not shown) for the introduction and coming out of 
the credit instrument 12 to be authenticated. 

For the implementation of the system subject matter of this 
invention a third apparatus is provided, schematically shown in 
Fig. 3, analogous to the preceding one and provided with further 
functions, being utilized in the last stage on the utilization 
and validation of the credit instrument 1?. Said apparatus 
comprises a personal computer 40 connected to the information 
svste-vi S.T of the issuino institution through a communication 
line 42 and a software programme SWC, a reader 44 of smart-card 
10. a biornetric identity sensor with a seat 50 where the appli- 
cant out the finger or fingers, and a printer 48. The latter is 
provided with a device which provides to the possible invalida- 
tion of the negotiated instrument 12. 

The hinmetric: sensor, comprised in all the above described 
apparatuses, is substantially mads up by a terminal controlled 
bv an built-in microprocessor specialized for the check of the 
identify based on the biometrical data of the fingers and the 
technology of the card. Both thi-- built-in application and the 
data reside in an internal RAM permanently fed by a lithium 
battery: the security is ensured by a built-in microprocessor 
and bv a built-in tamper proof security microprocessor, with 
secret^ keys, independent and unalterable, for the 0ES crypto- 
graphy, permanently fed by the lithium battery. 

The system for the safe authentication and management of regi- 
stered credit instruments and documents subject matter of this 
invention is articulated, as concerns the development of the 
operations, according to the following modalities. 
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Distinction is made, as specified above, between three different 
opera tinq stages: 

- issuino of the personalized smart-card 10: 

•- issuinq of the instrument or security 12 with security apposi- 
tion; 

- treatment of instrument 12 with authentication of the holder. 
The first stage is associated with the issue of card 10, which 
has preferably a temporary validity; through the apparatus 
schematically shown in Fig. 1, card 10 r o be personalized is 
introduced, through a special slit (not shown), in the 
reader /encoder 20. Now, the connection i made with the informa- 
tion system SI of the issuino institution r.nrough the communica- 
tion line 18, to record the issuing operation of card 10 and to 
receive from the same system the personal identification code 
CTP of the client. Said code is stored in the m ic roprcesso r of 
card .10 by the read;? r -encode r 20 in a protected manner, prefera- 
bly in the form of an a 1 phanumer i cal seoiu~ r,-~. . At. the same time, 
t h s a o r • I i. c a n t p u t s t h e f i n g e r o n s e a t 2-1 r- * : t he biometric senso r 
22; the print, or possibly several prints, corresponding to as 
many f inqers, a r.e stored in the microprocessor of card 10 in 
transcoded and protected form with the oersonal identification 
code CI P. During this stage, performed by the biometric sensor 
22, further indications are preferably stored in card 10, such 
as, for instance, the exoiry date of the same card and the 
particulars of the client or other data. 

Following this operation, card 10 is univocally personalized and 
allows to start the second stage which, through the apparatus 
schematically shown in Fig. 2. causes the issuing of the credit 
instrument or document 12, introduced in printer 36. The mentio- 
ned security print 14 in metallic or reflecting ink is already 
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present on the paper support forming said instrument. During 
this issuing stage, through printer 36 a security code is prin- 
ted, for instance of the known type PDF 417, subdivided into two 
parts that are not i n te rpre tabl e at sight: the first part of 
said code includes all the data relating to the release of the 
instrument (for instance, data and place of issue, institution 
and branch, document number, etc), while the second part of the 
code comprises the same data as the first one, expressed in 
cryptooraphied form by means of the key formed by the personal 
identification code CIP, which can be univocally associated as 
such to the person requiring the credit instrument 12. The 
applicant puts the finger in correspondence of seat 34 of the 
biomestric sensor 32 for the validation of his own print against 
the one stored in protected form in card 10 and sensed by 
reader 30. Reader 30 autonomously provides to reading the data 
of card '0 through the mathematical expression or algorithm and 
t'nn r.-crznnal identification code CIP of the applicant: such code 
is therefore utilized as a cryptographic key to generate the 
securifv code which printer 36 prints on the paper support 
forming the credit instrument or security or document 12. Also 
in this case, the details of the transaction are recorded 
through the communication line 20 in the information system SI 
of the issuing institution. 

Now the applicant has a univocally personalized credit instru- 
ment 12, which he can use in case of nsed giving his card, also 
personalised, to the personnel who performs the treatment and 
authentication of the same instrument through the third appara- 
tus schematically shown in Fig. 3. 

Supposing that the system subject matter of this invention be 
limited to the credit institutions where the two first apparatu- 
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ses are installed, also the third apparatus will be installed in 
the same, institutions or with a branch. The owner of the perso- 
nalized instrument 12 introduces preliminarily in reader 44 of 
said apparatus his card 10 and at the same time or immediately 
after, outs his finger on seat 50 of the biometric sensor* 46, 
for the validation of his print against the one stored in pro- 
tected form in the microprocessor of the same card. In case of 
positive recognition, reader 44 reads on card 10 the personal 
identification code CIP of the owner of instrument 12, which is 
adopted £<s a key to check the consistency between the two parts 
of th~ "r i r;urit.y code, utilizing the same mathematical expression 
of cr-'ntngraphv used on the issue of said instrument. The pori- 
Live rr-ooni tion , based on the uni vocal aspect of the finger- 
print, with the contextual activation of the other two elements, 
confif ■! - the validity of document 12, exluding any illicit 
utilisation of the same. Now printer 48 can provide to the 
invalidation of instrument 12, while the personnel of the branch 
ass rr~ the sum of money corresponding to the value of said 
instrument-, or validates the authentication of the person. The 
invalidation stage of the credit instrument is made by printing 
on th" n?.oer support forming the same instrument a writing, for 
instance "negotiated" or "paid" through said printer 43. Through 
the communication line 42. connected to the information system 
SI, also this ending stage of the transaction is recorded. 
One shnui.d anticipate that the operations concerning the issue 
staa-7! of car^t 10 with the intervention of the first apparatus 
mav rnv;r,ri.se also the issue of a further card for a co-holder 
whose particulars are obtained with the same modalities descri- 
bed above. One should also anticipate that the same apparatus 
issuino the card may provide also to the renewal of the same. 
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with the updating of the particulars on the client and/or the 
issue of a new personalized document. 

As can b3 understood from the above, the system for the authen- 
ticatT" 1 :- and manaaement of registered credit instruments and 
documents subiect matter of this invention provides guarantees 
of utmor.t security; in fact, the issued instruments can be 
exacted only by the legitimate holder based on a precise and 
uni vocal check . 

The advantages of said system, which, as described above, may be 
adopted to prevent the risk connected to the circulation of any 
r eci i s tr-y r eel c r ed i t i ns t r ume n t or doc ument, are e s pec i a 1 1 y e v i de n t 
if said instrument attributes the holder the ready availability 
of a divan amount of money; in fact, the: same holder can readily 
cash the corresponding sum with any body having entered an 
a a r e e w- n r. with t hf=: i s •?. ur-r , d i s po 3 i n g therefore of cash i n ha n d , 
w i. t h o > _i t r u n n i n ci a n y r i s k . 

F v r- n i '• ! 1 h e u n 1 i k e 1 v hypothec; i s of a c o n temporaneous loss or 
r.tco.l i r-:» of the personalized credit i nst.r vfuenl and the card, the 
monr-v r---nnof; be cashed bv third parties as on the check made 
before paying, -there would be no correspondence between the 
fingerprint of the holder and the one stored in the card micro- 
processor . 

Anyhow, the invention, as described hereabove and claimed he- 
reafter-, has been proposed by way of example, being obvious that 
the same may be susceptible of many changes and variants, all of 
them falling however withing the invention concept. 
For- instance, the apparatus for the issue of the registered 
credit instrument or document and the apparatus for the related 
validation, and possibly also the first apparatus providing to 
issuino the personalized card, might be incorporated in only 
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apparatus; in the same way, the card reader and the biometric 
sensor comprised in the second and the third apparatus might be 
incorporated in one only station. 

Lastly, while the* system has been proposed by way of example for 
a realization within the bank ciruit, further possibilities are 
not to be excluded in this regard: in fact, the basic need of 
having several places available for the fruition of the system 
may be satisfied by different bodies, for instance Post Offices, 
Communr;: s o r 1 oca 1 administrations in gene r :-\ I . 
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CLAIMS 

1 . A system for the safe authentication and management of regi- 
stered credit instruments and documents, comprising: 

- a personalized document (10) incorporating a microprocessor 
suitable to store a personal identification code CIP of the 
holder and a numeric information associated to biometric charac- 
teristics of the same holder; 

- first means for issuing said personalized document (10) to the 
holder ; 

- second means for issuing registered credit instruments (12) or 

d o c u m e n t s : 3 n d 

- third msaans for validating the use of the registered instru- 
ments (12) or documents, all of said means being either associa- 
ted or not associated to an information system SI and provided 
with a device for acquiring at least one biometric characteri- 
stic of the holder; 

said reoistered instruments (12) or documents issued comprising 
at least c-. security code univocally generated utilizing the 
persona] identification code CIP as a cryptographic key; 
said information being associated to a mathematical expression 
or algorithm of the data related to the fingerprint of at least 
a live finger of the holder of said personalized document (10); 
the recognition of the holder, both for the issue of the regi- 
stered instrument or document and for the related validation, 
being obtained by comparing the information got through the 
direct reading of the finger of the holder and the application 
of tha mathematical expression with the one stored in the perso- 
nalized document (10). 

2. The system according to claim 1, characterized in that said 
mathematical expression is formed by an algorithm of the DES 
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type. 

3. The svstem according to claims 1 and 2. characterized in that 
said fiie.?.ns for the release of the personalized document (10) 
comprise a oersonal computer (16) connected to a reader/encoder 
(20) for storing in protected form in the microprocessor of the 
document (10) said personal identification code CIP of the 
holder supplied by the information system SI of the issuing 
institution through a communication line (18), and a biometric 
sensor (':<?.) for storing in transcoded form in the same micropro- 
cessor, to form said numeric information or algorith, at least a 
finacrorint of the holder, who puts the finger in correspondence 
of a seat (24) of said sensor. 

4. Thr: -vstsm according to claims I and 2. characterized in that 
said means for issuing credit instruments or documents (12) 
comnr i a personal computer (26) connected to the information 
svstnn: of the issuing institution through a communication line 
(28). reader (30) of thr personalized document (10) t a biome- 
tric ;erv-,or (32) and a printer (36) provided with graphic moda- 
lity f;:» printing- on said credit instruments (12) a security 
code not i nte rpre table at sight, generated by said personal 
identification code CIP, utilized as a cryptographic key and 
sensed hv sensor (32) in case of positive recognition fcllowing 
the comparison between the fingerprint of the holder, who puts 
the live finger on a seat (34) of said sensor, and the one 
stored in protected form, forming the numeric information, in 
the mic roprcessor of the document (10). 

5. Th-n svstem according to one or more of the preceding claims, 
characterized in that said means for validating the use of the 
credit instruments or documents (12) comprise a personal compu- 
ter (40) connected to the information system SI of the issuing 
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institution through a communication line (42), a reader of the 
personalized document (10), a biometric sensor (46) and a prin- 
ter (-18) provided with graphic modality for invalidating said 
credit instruments (12) in case of positive recognition follo- 
wing the comparison between the print of the holder, who puts 
the live finger on a seat (50) of the same sensor, and the one 
stored in protected form, forming the numeric information, in 
the microprocessor of the document (10). 

6. Thes svstem according to one or more of the preceding claims, 
characterized in that said credit instruments or documents (12) 
.-♦re r;,^- uo by a paper support on which there is obtained a 
security print (14) in reflecting or metallic ink, having two or 
more -ones with different, light reflection, said zones being 
formed by alternating embossed or hollow sectors, circumscribed 
by accroached lines differently oriented by groups relatively to 
one a not her. 

7. Th;:- -vst.ern according to one or more of the preceding claims, 
characterized in that said means for the release of the persona- 
) i zed document (10), th~- issue of registered credit instruments 
or documents (12) and the validation to the use of the same 
registered instruments or documents are independent on or inte- 
grated in one or more a oca rat uses. 

8. Th** system according to one or more of the preceding claims, 
characterized in that said means for the release of the persona- 
lized document (10), the issue of registered credit instruments 
or documents (12) and the validation of the same registered 
credit, instruments or documents are combined with one another 
depending on the card (10), the same registered credit instru- 
ments or documents (12) and/or the related paper support. 
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